Static task
static1
Behavioral task
behavioral1
Sample
3dcab55b950c55a531f440da1dec870a285be5a286b94478f949bf296003d3bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3dcab55b950c55a531f440da1dec870a285be5a286b94478f949bf296003d3bf.exe
Resource
win10v2004-20220812-en
General
-
Target
3dcab55b950c55a531f440da1dec870a285be5a286b94478f949bf296003d3bf
-
Size
410KB
-
MD5
69bfa291f3715a9d098c9e3c2a81a634
-
SHA1
1fb35780d01219b76e75bc68d6482aa97ae0f198
-
SHA256
3dcab55b950c55a531f440da1dec870a285be5a286b94478f949bf296003d3bf
-
SHA512
e419434d986467f9158100a6e531b0472de0e9067f7e88fd4bc7c75d502d96fcb3f4c3ecfbf8f09ad3887756282b863559a8e969e8f5be22f525932396407b6f
-
SSDEEP
6144:D2W3yb7JvqlUeTLXjfBJ7NxYa4qeZUqlHHmcvXSbGqgSbGqnSbGq:Dhi3Jva1zfNxtBeZUqlNvXS6SVS
Malware Config
Signatures
Files
-
3dcab55b950c55a531f440da1dec870a285be5a286b94478f949bf296003d3bf.exe windows x86
66476c3762d0ef81762f6b6a7b9d8878
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
CloseHandle
CompareStringW
CreateFileMappingW
CreateFileW
FoldStringW
GetCurrentProcess
GetCurrentThreadId
GetDateFormatW
GetFileInformationByHandle
GetLocalTime
GetLocaleInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoA
GetUserDefaultLCID
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
TerminateProcess
lstrcmpiW
lstrcpyW
lstrlenW
GetTimeFormatW
CreateFileA
user32
LoadCursorW
LoadCursorA
LoadIconA
advapi32
RegOpenKeyW
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ